1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 



EIGHTH CAUSE OF ACTION 
(Declaratory Judgment of Noninfringement of U.S. Patent No. 6,711,615) 

45. Fortinet repeats and realleges each and every allegation set forth above in 
paragraphs 1 through 44, inclusive, and incorporates them by reference herein. 

46. Because SRI contends that Fortinet needs to license the '615 patent, it follows that 
SRI believes its '615 patent is valid and infringed by Fortinet. As a result of the totality of the 
circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '6 1 5 patent. 

47. Fortinet contends that its products and services do not infringe, contribute to the 
infringement of, or induce others to infringe any valid and enforceable claim of the '615 patent, 
either directly or indirectly, either literally or under the doctrine of equivalents. Accordingly, 
Fortinet does not need a license to the '615 patent, and it has a right to continue to providing its 
security services without a license to or interference from SRI's '615 patent. 

48. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that its products do not infringe any valid claim of the '615 patent. Such a 
determination and declaration are necessary and appropriate at this time in order that the parties 
may ascertain their respective rights and duties. 

NINTH CAUSE OF ACTION 
(Declaratory Judgment of Invalidity of U.S. Patent No. 7.594.260) 

49. Fortinet repeats and realleges each and every allegation set forth in paragraphs 1 
through 48, inclusive, and incorporates them by reference herein. 

50. Because SRI contends that Fortinet needs to license the SRI patents, it follows 
that SRI believes its '260 patent is valid and infringed by Fortinet. As a result of the totality of 
the circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '260 patent. 

51. Fortinet contends that the '260 patent is invalid because it fails to satisfy the 
conditions and requirements for patentability as set forth, inter alia, in Sections 101, 102, 103, 
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and/or 112 of Title 35 of the United States Code. For example, the '260 patent is anticipated 
and/or rendered obvious in light of Live Traffic, EMERALD 1997, Lewis, and the ISS 
RealSecure and NetRanger products. 

52. On at least the basis that it believes the '260 patent is invalid, Fortinet does not 
need a license to the '260 patent, and it has a right to continue providing its security products and 
services without a license to or interference from SRI's '260 patent. 

53. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that the '260 patent is invalid. Such a determination and declaration are necessary 
and appropriate at this time in order that the parties may ascertain their respective rights and 
duties. 

TENTH CAUSE OF ACTION 
(Declaratory Judgment of Noninfringement of U.S. Patent No. 7.594.260^ 

54. Fortinet repeats and realleges each and every allegation set forth above in 
paragraphs 1 through 53, inclusive, and incorporates them by reference herein. 

55. Because SRI contends that Fortinet needs to license the '260 patent, it follows that 
SRI believes its '260 patent is valid and infringed by Fortinet. As a result of the totality of the 
circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
"ortinet for infringement of the '260 patent. 

56. Fortinet contends that its products and services do not infringe, contribute to the 
nfringement of, or induce others to infringe any valid and enforceable claim of the '260 patent, 
;ither directly or indirectiy, either literally or under the doctrine of equivalents. Accordingly, 
^ortinet does not need a license to the '260 patent, and it has a right to continue to providing its 
lecurity services without a license to or interference from SRI's '260 patent. 

57. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
»etween Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
leclaration that its products do not infringe any valid claim of the '260 patent. Such a 

/ / 
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determination and declaration are necessary and appropriate at this time in order that the parties 
may ascertain their respective rights and duties. 

ELEVENTH CAUSE OF ACTION 
(Declaratory Judg ment of Invalidity of U.S. Patent No. 7.694.1 15 

58. Fortinet repeats and realleges each and every allegation set forth in paragraphs 1 
through 57, inclusive, and incorporates them by reference herein. 

59. Because SRI contends that Fortinet needs to license the SRI patents, it follows 
that SRI believes its '1 15 patent is valid and infringed by Fortinet. As a result of the totality of 
the circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the ' 1 15 patent. 

60. Fortinet contends that the '115 patent is invalid because it fails to satisfy the 
conditions and requirements for patentability as set forth, inter alia, in Sections 101, 102, 103, 
and/or 112 of Title 35 of the United States Code. For example, the '115 patent is anticipated 
and/or rendered obvious in light of Live Traffic, EMERALD 1997, Lewis, and the ISS 
RealSecure and NetRanger products. 

61. On at least the basis that it beUeves the '115 patent is invalid, Fortinet does not 
need a license to the ' 1 15 patent, and it has a right to continue providing its security products and 
services without a license to or interference from SRI's '115 patent. 

62. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that the '115 patent is invalid. Such a determination and declaration are necessary 
and appropriate at this time in order that the parties may ascertain their respective rights and 
duties. 

TWELFTH CAUSE OF ACTION 
(Declaratory Judgment of Noninfringement of U.S. Patent No. 7.694.115^ 

63. Fortinet repeats and realleges each and every allegation set forth above in 
paragraphs 1 through 62, inclusive, and incorporates them by reference herein. 

/ / / 
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64. Because SRI contends that Fortinet needs to license the ' 1 1 5 patent, it follows that 
SRI believes its '1 15 patent is valid and infringed by Fortinet. As a result of the totality of the 
circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the ' 1 1 5 patent. 

65. Fortinet contends that its products and services do not infringe, contribute to the 
infringement of, or induce others to infringe any valid and enforceable claim of the '1 15 patent, 
either directly or indirectly, either literally or under the doctrine of equivalents. Accordingly, 
Fortinet does not need a license to the '115 patent, and it has a right to continue to providing its 
security services without a license to or interference from SRI's '115 patent. 

66. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that its products do not infringe any valid claim of the '115 patent. Such a 
determination and declaration are necessary and appropriate at this time in order that the parties 
may ascertain their respective rights and duties. 

PRAYER FOR RELIEF 
WHEREFORE, plaintiff Fortinet requests entry of judgment in its favor and against 
defendant SRI as follows: 

(a) Declaring that the claims of the '338 patent, the '203 patent, the '874 patent, 
the '615 patent, the '260 patent, and the '1 15 patent are invalid; 

(b) Declaring that Fortinet has not infringed, induced others to infringe, or 
contributed to the infringement of any valid claim of the '338 patent, the 
'203 patent, the '874 patent, the '615 patent, the '260 patent, or the '115 
patent, either directly or indirectly, either literally or under the doctrine of 
equivalents; 

(c) Enjoining SRI, its officers, owners, partners, employees, agents, parents, 
subsidiaries, attorneys, and anyone acting in concert or participation with 
any of them, from making any claims that Fortinet infringes the '338 patent, 

/ / / 
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the '203 patent, the '874 patent, the '615 patent, the '260 patent, or the '1 15 
patent; 

(d) Enjoining SRI, its officers, owners, partners, employees, agents, parents, 
subsidiaries, attorneys, and anyone acting in concert or participation with 
any of them, from enforcing the '338 patent, the '203 patent, the '874 patent, 
the '615 patent, the '260 patent, or the '115 patent against Fortinet's 
products and services; 

(e) Awarding Fortinet its costs of suit, including reasonable attorneys' fees; and 

(f) Granting such other and further relief as the Court may deem just and 
proper. 

I: May 1 7, 20 1 2 Respectfully submitted. 
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DEMAND FOR JURY TRTAT. 

Pursuant to Federal Rule of Civil Procedure 38 and Civil Local Rule 3-6(a), Fortinet 
hereby demands a jury trial of all issues triable by a jury. 



Dated: May 17, 2012 WILSON SONSINI GOODRICH & ROSATI 

Professional Corporation 




Attorneys for Plaintiff 
FORTINET, INC. 
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E-RLING 

STEFANI E. SHANBERG (State Bar No. 206717) 
RYAN R. SMITH (State Bar No. 229323) 

ROBIN L. BREWER (State Bar No. 253686) A H P 

WILSON SONSINI GOODRICH & ROS ATI ^ 
Professional Corporation 
650 Page Mill Road 
Palo Alto, California 94304 
Telephone: (650) 493-9300 
Facsimile: (650) 565-5100 

E-Mail: sshanberg@wsgr.com i / , 

rsmith@wsgr.com ' ^^"C 

rbrewer@wsgr.com ^ cteri* w. w/eic/n 

Attorneys for Plaintiff c«^< "'^'f^^/ 

FORTINET, INC. 



IN THE UNITED STATES DISTRICT COURT 
FOR THE NORTHERN DISTRICT OF CALIFORNIA 
SAN JOSE DIVISION 



FORTINET, INC., 

a Delaware corporation. 



Plaintiff, 



SRI INTERNATIONAL, INC., 
a California corporation. 

Defendant. 



HttL 

COMPLAINT FOR 
DECLARATORY JUDGMENT 

JURY TRIAL DEMANDED 



Fortinet, Inc. hereby alleges for its complaint against defendant SRI International, on 
personal knowledge as to its own activities and on information and belief as to the activities of 
others, as follows: 

THE PARTIES 

1 . Plaintiff Fortinet, Inc. ("Fortinet") is a corporation organized and existing under 
the laws of Delaware, with its principal place of business at 1090 Kifer Road, Sunnyvale, 
California 94086. Plaintiff is a worldwide provider of network security appliances and a market 
leader in unified threat management (UTM) solutions. Fortinet's products and subscription 
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services provide broad, integrated, and high-performance protection against dynamic security 
threats, while simplifying the IT security infrastructvire. 

2. Defendant SRI International, Inc. ("SRI") is an independent research institute 
incorporated under the laws of California, and has a regular and established place of business at 
333 Ravenswood Avenue, Menlo Park, California 94025. 

TNTRADISTRICT ASSIGNMENT 

3. Pursuant to Civil Local Rule 3 -2(c), this is an Intellectual Property Action to be 
assigned on a district-wide basis. 

BACKGROUND 

4. United States Patent No. 6,321,338 ("the '338 patent"), entitled Network 
Surveillance, states on its face that it is assigned to SRI. The '338 patent states that it issued on 
November 20, 2001. A true and correct copy of the '338 patent is attached hereto as Exhibit A. 

5. United States Patent No. 6,484,203 ("the '203 patent"), entitled Hierarchical 
Event Monitoring and Analysis, states on its face that it is assigned to SRI. The '203 patent 
states that it issued on November 19, 2002. A true and correct copy of the '203 patent is 
attached hereto as Exhibit B. 

6. United States Patent No. 6,704,874 ("the '874 patent"), entitled Network-Based 
Alert Management, states on its face that it is assigned to SRI. The '874 patent states that it 
issued on March 9, 2004. A true and correct copy of the '874 patent is attached hereto as 
Exhibit C. 

7. United States Patent No. 6,711,615 ("the '615 patent"), entitled Network 
Surveillance, states on its face that it is assigned to SRI. The '615 patent states that it issued on 
March 23, 2004. A true and correct copy of the '615 patent is attached hereto as Exhibit D. 

8. United States Patent No. 7,594,260 ("the '260 patent"), entitled Network 
Surveillance Using Long-Term and Short-Term Statistical Profiles to Determine Suspicious 
Network Activity, states on its face that it is assigned to SRI. The '260 patent states that it issued 
on September 22, 2009. A true and correct copy of the '260 patent is attached hereto as 
Exhibit E. 
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9. United States Patent No. 7,694,1 15 ("the '115 patent"), entitled Network-Based 
Alert Management System, states on its face that it is assigned to SRI. The '115 patent states 
that it issued on April 6, 2010. A true and correct copy of the '1 15 patent is attached hereto as 
Exhibit F. 

10. In August of 2004, SRI filed a lawsuit against both Internet Security Systems, Inc. 
and Symantec Corporation in the United States District Court for the District of Delaware 
alleging infringement of, inter alia, the '338 patent, the '203 patent, and the '615 patent. That 
lawsuit continued until late 2011. In Febmary 2011, SRI filed a second lawsuit, also in 
Delaware, alleging that Symantec infringed the '203 patent and the '615 patent. The parties to 
that second lawsuit stipulated to dismissal on April 27, 2012. SRI has, therefore, been engaged 
in a persistent pattern of litigation involving at least the '338 patent, the '203 patent, and the '615 
patent for nearly eight years. 

11. On May 9, 2012-less than two weeks after concluding nearly eight years of 
persistent litigation-SRI's Vice President of Legal and Business Affairs and General Counsel 
Richard H. Abramson, wrote to John Whittle, Fortinet's Vice President of Legal and Corporate 
Development, seeking to "initiate a discussion with you regarding a license to this portfolio," and 
listing each of the patents attached as Exhibits A-F as patents "applicable to Fortinet's business 
Mr. Abramson touted "SRI's patent position" and "earlier enforcement efforts" which include 
years of litigation. Mr. Abramson specifically said SRI believes these patents to be "highly 
relevanf to "all Fortinet products that incorporate FortiGate IPS with Forti Analyzer." And Mr. 
Abramson copied SRI's litigation counsel on the letter. In other words, SRI alleged that 
numerous Fortinet products infringe the patents attached as Exhibits A-F. 

12. Upon receipt of Mr. Abramson's letter, and in light of SRJ's persistent pattern of 
litigation, Fortinet immediately became concerned that it is SRI's next litigation target and 
checked dockets to confirm no such complaint had yet been filed. Fortinet believes SRI will not 
hesitate to file suit immediately. 
/ / 
/ / 
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FIRST CAUSE OF ACTION 
(Declaratory Judgment of Invalidity of U.S. Patent No. 6,321,338) 



13. Fortinet repeats and realleges each and every allegation set forth in paragraphs 1 
through 12, inclusive, and incorporates them by reference herein. 

14. Because SRI contends that Fortinet needs to license the SRI patents, it follows 
that SRI believes its '338 patent is valid and infringed by Fortinet. As a resuh of the totality of 
the circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '338 patent. 

15. Fortinet contends that the '338 patent is invalid because it fails to satisfy the 
conditions and requirements for patentability as set forth, inter alia, in Sections 101, 102, 103, 
and/or 112 of Title 35 of the United States Code. For example, the '338 patent is anticipated 
and/or rendered obvious in light of a paper entitled "Live Traffic Analysis of TCP/IP Gateways" 
("Live Traffic") and/or "EMERALD: Event Monitoring Enabling Responses To Anomalous 
Live Disturbances" ("EMERALD 1997"). 

16. On at least the basis that it believes the '338 patent is invalid, Fortinet does not 
need a license to the '338 patent, and it has a right to continue providing its security products and 
services without a license to or interference from SRI's '338 patent. 

17. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that the '338 patent is invalid. Such a determination and declaration are necessary 
and appropriate at this time in order that the parties may ascertain their respective rights and 
duties. 

SECOND CAUSE OF ACTION 
(Declaratory Judgment of Noninfringement of U.S. Patent No. 6,321,338) 

18. Fortinet repeats and realleges each and every allegation set forth above in 
paragraphs 1 through 17, inclusive, and incorporates them by reference herein. 

19. Because SRI contends that Fortinet needs to license the '338 patent, it follows that 
SRI believes its '338 patent is valid and infi-inged by Fortinet. As a result of the totality of the 
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circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '338 patent. 

20. Fortinet contends that its products and services do not infringe, contribute to the 
infringement of, or induce others to infringe any valid and enforceable claim of the '338 patent, 
either directly or indirectly, either literally or under the doctrine of equivalents. Accordingly, 
Fortinet does not need a license to the '338 patent, and it has a right to continue to providing its 
security services without a license to or interference from SRI's '338 patent. 

21. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that its products do not infringe any valid claim of the '338 patent. Such a 
determination and declaration are necessary and appropriate at this time in order that the parties 
may ascertain their respective rights and duties. 

THIRD CAUSE OF ACTION 
(Declaratory Judgment of Invalidity of U.S. Patent No. 6.484.203) 

22. Fortinet repeats and realleges each and every allegation set forth in paragraphs 1 
through 21 , inclusive, and incorporates them by reference herein. 

23. Because SRI contends that Fortinet needs to license the SRI patents, it follows 
that SRI believes its '203 patent is valid and infringed by Fortinet. As a result of the totality of 
the circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '203 patent. 

24. Fortinet contends that the '203 patent is invalid because it fails to satisfy the 
conditions and requirements for patentability as set forth, inter alia, in Sections 101, 102, 103, 
and/or 112 of Title 35 of the United States Code. For example, the '203 patent is anticipated 
and/or rendered obvious in light of Live Traffic, EMERALD 1997, and U.S. Patent No. 
5,768,501 ("Lewis"), and the ISS RealSecure and NetRanger products. 

25. On at least the basis that it believes the '203 patent is invalid, Fortinet does not 
need a license to the '203 patent, and it has a right to continue providing its security products and 
services without a license to or interference from SRI's '203 patent. 
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26. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that the '203 patent is invalid. Such a determination and declaration are necessary 
and appropriate at this time in order that the parties may ascertain their respective rights and 
duties. 

FOURTH CAUSE OF ACTION 
(Declaratory Judgment of Nonipfringement of U.S. Patent No. 6,484,203) 

27. Fortinet repeats and realleges each and every allegation set forth above in 
paragraphs 1 through 26, inclusive, and incorporates them by reference herein. 

28. Because SRI contends that Fortinet needs to license the '203 patent, it follows that 
SRI believes its '203 patent is valid and infringed by Fortinet. As a result of the totality of the 
circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '203 patent. 

29. Fortinet contends that its products and services do not infringe, contribute to the 
infringement of, or induce others to infringe any valid and enforceable claim of the '203 patent, 
either directly or indirectly, either literally or under the doctrine of equivalents. Accordingly, 
Fortinet does not need a license to the '203 patent, and it has a right to continue to providing its 
security services without a license to or interference from SRI's '203 patent. 

30. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that its products do not infringe any valid claim of the '203 patent. Such a 
determination and declaration are necessary and appropriate at this time in order that the parties 
may ascertain their respective rights and duties. 

FIFTH CAUSE OF ACTION 
(Declaratory Judgment of Invalidity of U.S. Patent No. 6,704.874) 

31. Fortinet repeats and realleges each and every allegation set forth in paragraphs 1 
through 30, inclusive, and incorporates them by reference herein. 

/ / / 
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32. Because SRI contends that Fortinet needs to license the SRI patents, it follows 
that SRI believes its '874 patent is valid and infringed by Fortinet. As a result of the totality of 
the circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '874 patent. 

33. Fortinet contends that the '874 patent is invalid because it fails to satisfy the 
conditions and requirements for patentability as set forth, inter alia, in Sections 101, 102, 103, 
and/or 112 of Title 35 of the United States Code. For example, the '874 patent is anticipated 
and/or rendered obvious in light of Live Traffic, EMERALD 1997, Lewis, and the ISS 
RealSecure and NetRanger products. 

34. On at least the basis that it believes the '874 patent is invalid, Fortinet does not 
need a license to the '874 patent, and it has a right to continue providing its security products and 
services without a license to or interference from SRJ's '874 patent. 

35. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that the '874 patent is invalid. Such a determination and declaration are necessary 
and appropriate at this time in order that the parties may ascertain their respective rights and 
duties. 

SIXTH CAUSE OF ACTION 
(Declaratory Judgment of Noninfringement of U.S. Patent No. 6,704,874) 

36. Fortinet repeats and realleges each and every allegation set forth above in 
paragraphs 1 through 35, inclusive, and incorporates them by reference herein. 

37. Because SRI contends that Fortinet needs to license the '874 patent, it follows that 
SRI believes its '874 patent is valid and infringed by Fortinet. As a result of the totality of the 
circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '874 patent. 

38. Fortinet contends that its products and services do not infringe, contribute to the 
infringement of, or induce others to infringe any valid and enforceable claim of the '874 patent, 
either directly or indirectly, either literally or under the doctrine of equivalents. Accordingly, 
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Fortinet does not need a license to the '874 patent, and it has a right to continue to providing its 
security services without a license to or interference from SRI's '874 patent. 

39. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that its products do not infringe any valid claim of the '874 patent. Such a 
determination and declaration are necessary and appropriate at this time in order that the parties 
may ascertain their respective rights and duties. 

SEVENTH CAUSE OF ACTION 
(Declaratory Judgment of Invalidity of U.S. Patent No. 6.711.615) 

40. Fortinet repeats and realleges each and eveiy allegation set forth in paragraphs 1 
through 39, inclusive, and incorporates them by reference herein. 

41. Because SRI contends that Fortinet needs to license the SRI patents, it follows 
that SRI believes its '615 patent is valid and infringed by Fortinet. As a result of the totality of 
the circumstances between the parties discussed above, Fortinet believes that SRI intends to sue 
Fortinet for infringement of the '615 patent. 

42. Fortinet contends that the '615 patent is invalid because it fails to satisfy the 
conditions and requirements for patentability as set forth, inter alia, in Sections 101, 102, 103, 
and/or 112 of Title 35 of the United States Code. For example, the '615 patent is anticipated 
and/or rendered obvious in light of Live Traffic, EMERALD 1997, Lewis, and the ISS 
RealSecure and NetRanger products. 

43. On at least the basis that it believes the '615 patent is invalid, Fortinet does not 
need a license to the '615 patent, and it has a right to continue providing its security products and 
services without a license to or interference from SRI's '615 patent. 

44. Accordingly, an actual, valid, and justiciable controversy has arisen and exists 
between Fortinet and SRI. Fortinet desires a prompt and definitive judicial determination and 
declaration that the '615 patent is invalid. Such a determination and declaration are necessary 
and appropriate at this time in order that the parties may ascertain their respective rights and 
duties. 
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